Union Discount (“we”, “us”) operates uniondiscount.net, an aggregator of sale items from independent skate shops. We are the data controller for the personal data described in this policy.

Contact: heyuniondiscount@gmail.com
Postal address: 81 Carrer Enamorats 4-3, Barcelona, 08013, Spain

• Region preference: stored in a cookie named region so we can show relevant shops.
• Alert subscriptions (if you opt in): email address, filter criteria, region, timestamp and IP address of consent, and the version of this policy shown at signup.
• Analytics (if you accept cookies): Google Tag Manager and Google Analytics collect pseudonymous data about your visit. Server-side visitor counts (via Cloudflare) run regardless of consent and do not involve cookies or personal data.
• Server logs: our hosting provider retains IP addresses and request metadata for up to 30 days for security and abuse prevention.

We use the following processors. Each is bound by a Data Processing Agreement.

• Cloudflare (US, DPF-certified) — frontend hosting and CDN.
• Heroku / Salesforce (US, DPF-certified) — backend hosting and database.
• [SMTP provider TBD] — delivering alert emails.
• Google (US, DPF-certified) — Tag Manager and Analytics, only if you consent.

We do not sell your personal information. We do not share it for cross-context behavioural advertising.

Some processors are located in the United States. Transfers rely on the EU-US Data Privacy Framework certification of each processor and, where applicable, Standard Contractual Clauses. Canadian users’ data may also be processed in the US and become subject to US legal process.

• Unconfirmed alert subscriptions: 48 hours.
• Confirmed alert subscriptions: until you unsubscribe.
• After unsubscribe: email hashed and kept 30 days on a suppression list, then deleted. Consent records retained 3 years for legal defence.
• Server logs: 30 days.
• Analytics data: 14 months (Google Analytics default).

Under the GDPR and UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority — in Spain, the AEPD; in the UK, the ICO.

To exercise these rights, email heyuniondiscount@gmail.com. For alert subscriptions, use the “Manage” link in any email you received from us.

California residents have the right to:

• Know what personal information we collect and how we use it (see sections 2–4).
• Delete personal information we hold.
• Correct inaccurate personal information.
• Opt out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising.
• Limit use of sensitive personal information. We do not collect sensitive personal information as defined by CPRA.
• Non-discrimination for exercising these rights.

Categories of PI collected in the last 12 months: identifiers (email, IP), internet activity (analytics if consented). Categories disclosed for business purposes: identifiers (to hosting and email providers listed in section 4). Categories sold or shared: none.

To exercise these rights, email heyuniondiscount@gmail.com. We honour Global Privacy Control (GPC) signals automatically.

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have substantially similar rights to those listed above: access, deletion, correction, portability, and opt-out of targeted advertising and sale. Contact heyuniondiscount@gmail.com to exercise them.

Under PIPEDA you have the right to access and correct personal information we hold about you, and to withdraw consent for its processing. Complaints may be filed with the Office of the Privacy Commissioner of Canada.

Under CASL, commercial email is sent only with your express consent. Every email includes an unsubscribe link processed within 10 business days.

Union Discount is not directed at children under 16. We do not knowingly collect personal data from children under 16 (or under 13 in the US under COPPA). Alert subscription requires confirmation of being at least 16 years old.

We use the minimum cookies needed to operate the site:

• region — remembers your regional preference. Strictly necessary. 1 year.
• ud-consent — remembers your cookie choice. Strictly necessary. 6 months.
• _ga, _gid and related — Google Analytics. Only set if you accept. Up to 2 years.

You can change your choice at any time via Cookie preferences.

Privacy questions and rights requests: heyuniondiscount@gmail.com. We respond within 30 days.

We may update this policy. The version number and date at the top of this page indicate the current version. Material changes will be announced by email to alert subscribers where required.